• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Root [WIP][DEV] Custom Recovery/Bootloader unlocking Work In Progress Thread

Idk what this means or if it can help but here is a kernel log from my phone....noticed something about pet_watchdog_work in here whats this,mean?

: x=552 y=324 p=33
<6>[14535.097694] Exiting as rconn_mohm is 0
<6>[14535.375459] [TOUCH] Press 0 : x=510 y=797 p=28
<6>[14535.989316] [TOUCH] Release 0 : x=532 y=211 p=44
<4>[14536.126047] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=350, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-527901, UUC=83100, RUC=1525101, VBATT=4345155, IBAT=-206300
<6>[14536.128702] [BMS_SOC_INFO] soc=100% vbatt=4338V temp=35 ibat=-201mA
<4>[14536.166364] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=350, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-527903, UUC=83100, RUC=1525103, VBATT=4338612, IBAT=-206300
<4>[14536.195755] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=350, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-527905, UUC=83100, RUC=1525105, VBATT=4339209, IBAT=-202300
<4>[14536.225757] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=350, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-527907, UUC=83100, RUC=1525107, VBATT=4338909, IBAT=-198900
<4>[14536.266563] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=350, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-527909, UUC=83100, RUC=1525109, VBATT=4338909, IBAT=-206300
<4>[14536.295740] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=350, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-527911, UUC=83100, RUC=1525111, VBATT=4339209, IBAT=-201700
<6>[14537.541277] [TOUCH] Press 0 : x=569 y=748 p=31
<6>[14538.139629] [TOUCH] Release 0 : x=535 y=240 p=25
<4>[14541.946709] >>>pet_watchdog_work [system rev: 10][raw ver: 4]
<6>[14545.098273] Exiting as rconn_mohm is 0
<6>[14545.437782] [TOUCH] Press 0 : x=530 y=828 p=23
<6>[14546.084722] [TOUCH] Release 0 : x=570 y=379 p=48
<4>[14546.127085] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528444, UUC=83100, RUC=1525644, VBATT=4329096, IBAT=-198900
<6>[14546.130015] [BMS_SOC_INFO] soc=100% vbatt=4338V temp=35 ibat=-187mA
<4>[14546.155743] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528446, UUC=83100, RUC=1525646, VBATT=4339209, IBAT=-187500
<4>[14546.186630] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528448, UUC=83100, RUC=1525648, VBATT=4339506, IBAT=-193200
<4>[14546.215929] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528449, UUC=83100, RUC=1525649, VBATT=4338018, IBAT=-195500
<4>[14546.255789] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528451, UUC=83100, RUC=1525651, VBATT=4338612, IBAT=-205700
<4>[14546.285821] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528453, UUC=83100, RUC=1525653, VBATT=4338612, IBAT=-204600
<6>[14547.573323] [TOUCH] Press 0 : x=548 y=872 p=26
<6>[14548.152844] [TOUCH] Release 0 : x=577 y=375 p=27
<6>[14549.014403] [TOUCH] Press 0 : x=605 y=826 p=35
<6>[14549.612084] [TOUCH] Release 0 : x=609 y=294 p=44
<6>[14551.278283] [PM] BATT TEMP NORMAL : NORMAL ---> NORMAL , TEMP=35 , VOLT=4339
<4>[14551.305751] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528718, UUC=83100, RUC=1525918, VBATT=4339506, IBAT=-204000
<4>[14551.335722] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528720, UUC=83100, RUC=1525920, VBATT=4338612, IBAT=-200600
<4>[14551.365723] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528721, UUC=83100, RUC=1525921, VBATT=4338018, IBAT=-202300
<4>[14551.398258] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528723, UUC=83100, RUC=1525923, VBATT=4338315, IBAT=-192700
<4>[14551.435768] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=352, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528725, UUC=83100, RUC=1525925, VBATT=4337424, IBAT=-196000
<4>[14551.945702] >>>pet_watchdog_work [system rev: 10][raw ver: 4]
<4>[14552.561512] [qcoin_power_set] Motor Level is 0
<4>[14552.563556] [qcoin_power_set] Motor Level is 24
<4>[14552.603660] [qcoin_power_set] Motor Level is 0
<6>[14553.473521] [TOUCH] Press 0 : x=110 y=884 p=33
<6>[14553.583364] [TOUCH] Release 0 : x=109 y=886 p=29
<6>[14555.099860] Exiting as rconn_mohm is 0
<4>[14556.127390] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528960, UUC=83100, RUC=1526160, VBATT=4338612, IBAT=-196000
<6>[14556.131022] [BMS_SOC_INFO] soc=100% vbatt=4339V temp=35 ibat=-197mA
<4>[14556.165754] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528963, UUC=83100, RUC=1526163, VBATT=4338909, IBAT=-201700
<4>[14556.196396] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528964, UUC=83100, RUC=1526164, VBATT=4338909, IBAT=-196000
<4>[14556.225635] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528966, UUC=83100, RUC=1526166, VBATT=4340100, IBAT=-198900
<4>[14556.255636] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528968, UUC=83100, RUC=1526168, VBATT=4339506, IBAT=-195500
<6>[14556.265891] [TOUCH] Press 0 : x=493 y=781 p=37
<4>[14556.268852] [qcoin_power_set] Motor Level is 0
<4>[14556.269645] [qcoin_power_set] Motor Level is 24
<4>[14556.285668] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-528969, UUC=83100, RUC=1526169, VBATT=4340100, IBAT=-203500
<4>[14556.309810] [qcoin_power_set] Motor Level is 0
<6>[14556.410619] [TOUCH] Release 0 : x=496 y=775 p=28
<3>[14556.424719] init: sys_prop: permission denied uid:10002 name:ril.ecclist
<6>[14556.578786] [TOUCH] Press 0 : x=490 y=786 p=33
<4>[14556.581319] [qcoin_power_set] Motor Level is 0
<4>[14556.589377] [qcoin_power_set] Motor Level is 24
<4>[14556.629480] [qcoin_power_set] Motor Level is 0
<6>[14556.706758] [TOUCH] Release 0 : x=492 y=781 p=28
<6>[14557.327939] [TOUCH] Press 0 : x=123 y=667 p=47
<4>[14557.336271] [qcoin_power_set] Motor Level is 0
<4>[14557.340971] [qcoin_power_set] Motor Level is 24
<4>[14557.382204] [qcoin_power_set] Motor Level is 0
<6>[14557.441048] [TOUCH] Release 0 : x=128 y=671 p=31
<6>[14558.211107] [TOUCH] Press 0 : x=332 y=679 p=31
<4>[14558.213640] [qcoin_power_set] Motor Level is 0
<4>[14558.217761] [qcoin_power_set] Motor Level is 24
<4>[14558.259451] [qcoin_power_set] Motor Level is 0
<6>[14558.322354] [TOUCH] Release 0 : x=333 y=677 p=42
<6>[14558.547655] [TOUCH] Press 0 : x=483 y=600 p=22
<4>[14558.552966] [qcoin_power_set] Motor Level is 0
<4>[14558.559894] [qcoin_power_set] Motor Level is 24
<4>[14558.601249] [qcoin_power_set] Motor Level is 0
<6>[14558.687988] [TOUCH] Release 0 : x=500 y=590 p=27
<6>[14559.943321] [TOUCH] Press 0 : x=523 y=793 p=29
<4>[14559.953973] [qcoin_power_set] Motor Level is 0
<4>[14559.966181] [qcoin_power_set] Motor Level is 24
<4>[14560.006499] [qcoin_power_set] Motor Level is 0
<6>[14560.035432] [TOUCH] Release 0 : x=520 y=791 p=40
<4>[14561.947045] >>>pet_watchdog_work [system rev: 10][raw ver: 4]
<6>[14563.958185] [TOUCH] Press 0 : x=351 y=243 p=32
<6>[14564.081243] [TOUCH] Release 0 : x=360 y=243 p=49
<6>[14565.100349] Exiting as rconn_mohm is 0
<4>[14566.127665] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=350, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-529506, UUC=83100, RUC=1526706, VBATT=4341885, IBAT=-202800
<6>[14566.130930] [BMS_SOC_INFO] soc=100% vbatt=4340V temp=35 ibat=-204mA
<4>[14566.155896] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-529507, UUC=83100, RUC=1526707, VBATT=4340991, IBAT=-204000
<4>[14566.187515] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-529509, UUC=83100, RUC=1526709, VBATT=4341885, IBAT=-208000
<4>[14566.219104] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-529511, UUC=83100, RUC=1526711, VBATT=4341885, IBAT=-205100
<4>[14566.257285] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-529513, UUC=83100, RUC=1526713, VBATT=4341291, IBAT=-210300
<4>[14566.297205] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=351, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-529515, UUC=83100, RUC=1526715, VBATT=4340694, IBAT=-203500
<6>[14569.883959] [TOUCH] Press 0 : x=419 y=895 p=27
<6>[14570.657895] [TOUCH] Release 0 : x=519 y=387 p=31
<4>[14571.947411] >>>pet_watchdog_work [system rev: 10][raw ver: 4]
<6>[14575.098701] Exiting as rconn_mohm is 0
<4>[14576.127420] [BMS] ORG_SOC=96, ADJ_SOC=96, COMP_SOC=101(101), LAST_SOC=100, BAT_TEMP=352, OCV=3953288, RBATT=211, FCC=1662000, RC=1080300, CC=-530046, UUC=83100, RUC=1527246, VBATT=4340397, IBAT=-193800
<6>[14576.130747] [BMS_SOC_INFO] soc=
 
Ok, I've been contacting several individuals/developers about getting the bootloader unlocked.

So far I've got a list of what Won't work:

  • Project FreeGee (our device is too different)
  • Nvflash (our device is qualcomm instead of nvidia based)
  • Odin (this is for Samsung devices only)
  • Spectrum 4G Boot Loader (our boot+recovery are cryptographically signed)

And a couple leads that Might work. The most promising being the Unlocked Boot Loader for Galaxy S3. More details will be released as testing continues.
 
Sepero said:
Ok, I've been contacting several individuals/developers about getting the bootloader unlocked.

So far I've got a list of what Won't work:

  • Project FreeGee (our device is too different)
  • Nvflash (our device is qualcomm instead of nvidia based)
  • Odin (this is for Samsung devices only)
  • Spectrum 4G Boot Loader (our boot+recovery are cryptographically signed)

And a couple leads that Might work. The most promising being the Unlocked Boot Loader for Galaxy S3. More details will be released as testing continues.
Click to expand...


that lead is a dead end, there was a file leaked. thats how the sgs3 was unlocked and based off that the note 2. if this was a samsung device id be all for anyone flashing it as the chances would be fairly good, with you guys having a completely different setup i can only think of a few i wouldnt mind flashing it :O
 
Shabbypenguin said:
that lead is a dead end, there was a file leaked. thats how the sgs3 was unlocked and based off that the note 2. if this was a samsung device id be all for anyone flashing it as the chances would be fairly good, with you guys having a completely different setup i can only think of a few i wouldnt mind flashing it :O
Click to expand...

What if you were to ignore the leaked unlock, and were to poke around for another unlock... Maybe you could discover something that would be helpful for us?

How is the Sammy locked down compared to the LG?
 
Sepero said:
You could be right, Shabby. I'm currently in talks with Adam Outler, so we will see what happens.
Click to expand...
hopefully something good, adam is very smart and talented guy. hopefully he graces you with what your looking for, i however wouldnt expect a miracle.

SeanP8 said:
Whats up guys im wondering is there a root for the ZTE-N910 Anthem 4g??I want to root this phone so bad i tried the doomlord script and the ultimate warp drive and neither worked and im pretty sure i followed directions right on both??? anybody know something i dont???
Click to expand...

this is teh wrong forum for this kind of question you can ask around more in here Anthem 4G - All Things Root - Android Forums
 
After my talks with Adam Outler about installing the Galaxy S3 loader on our phone, it basically boiled down to this from him "Don't do it". ;)

Currently we are still working on generating more leads, and we are not giving up. It's going to take more research and time to see where we can go from here. Everyone's help thus far is greatly appreciated.
 
Sepero said:
After my talks with Adam Outler about installing the Galaxy S3 loader on our phone, it basically boiled down to this from him "Don't do it". ;)

Currently we are still working on generating more leads, and we are not giving up. It's going to take more research and time to see where we can go from here. Everyone's help thus far is greatly appreciated.
Click to expand...

Yea i could have told you attempting to flash a bootloader from a different manuf was a bad idea lol. But like said Adam is very smart, so if anyone can figure it out its him.
 
Upon redoing the firmware update OTA, it looks like there might some magic in it that could be exploited. It launches the update EXTREMELY early in the boot process.

We need to get some people looking into this.
 
Sepero said:
Upon redoing the firmware update OTA, it looks like there might some magic in it that could be exploited. It launches the update EXTREMELY early in the boot process.

We need to get some people looking into this.
Click to expand...
I haven't yet figured out the location where the OTA firmware update is saved to.
 
Sepero said:
I haven't yet figured out the location where the OTA firmware update is saved to.
Click to expand...

So we downgrade to C, download the update, replace it with something of our own, then tell the phone to update, then it over writes LG's crap with our crap and we win! :d
 
Sepero said:
Upon redoing the firmware update OTA, it looks like there might some magic in it that could be exploited. It launches the update EXTREMELY early in the boot process.

We need to get some people looking into this.
Click to expand...
check you pm's i hope theres something there.
 
Sepero said:
Upon redoing the firmware update OTA, it looks like there might some magic in it that could be exploited. It launches the update EXTREMELY early in the boot process.

We need to get some people looking into this.
Click to expand...

You'll need a key for this method. when lg signs an update, they use a security key sorta like the checks nintendo uses to determine if a pokemon has been hacked into the game. (Check out bulbapedia and look up secret id to see what i mean.)
 
sammyz said:
LGs OTA update is encrypted or something. :(
Click to expand...
For anyone that might be able to help crack the update. Here I will post the contents of the /data/data/com.lge.lgfotaclient/ directory. I altered my uid in the dkresume.dat file to 1111111, but the url in it will still work.

fota.zip

I notice that all the contents at the end of the update file are in plain text (unencrypted).
 
Sepero said:
For anyone that might be able to help crack the update. Here I will post the contents of the /data/data/com.lge.lgfotaclient/ directory. I altered my uid in the dkresume.dat file to 1111111, but the url in it will still work.

fota.zip

I notice that all the contents at the end of the update file are in plain text (unencrypted).
Click to expand...

If anyone earlymon could try and crack it :P
 
You must log in or register to reply here.
Back
Top Bottom